Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: Qa8Z6CmBuKCBvxhTdtFVPSyLHN3/795YZ223QxOT9Ww=
Subject key identifier: FE:13:1D:44:16:D5:C1:51:91:DF:D1:C4:16:59:DB:63:84:FC:6B:CC
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 0194BC04EB8EA4D19F405C1EFB19249F51E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: ITcx1SylUYcG4tqYnHErHBre2shW1sFccAliGtzhglQ=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:eb:8e:a4:d1:9f:40:5c:1e:fb:19:24:9f:51:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=fe131d4416d5c15191dfd1c41659db6384fc6bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f8:1f:dd:46:73:18:8c:5f:1b:89:2b:95:d6:
f2:a3:73:32:be:cd:48:85:47:ee:35:0c:f7:12:26:
47:a5:34:df:43:46:ca:46:cc:52:74:a5:ad:46:6d:
9f:41:25:22:ca:4e:98:ac:8c:4b:39:a6:50:28:d6:
f8:7c:5a:ca:06:54:58:eb:41:81:8f:f5:e5:7d:98:
08:40:bd:80:ec:90:8e:6d:89:84:fb:8c:b1:90:70:
af:e8:f4:d0:15:b7:a6:c6:0a:a1:ef:c4:a5:a9:f8:
65:68:08:f4:f0:32:20:91:1a:db:d7:00:84:fa:25:
12:bc:02:5d:85:5c:61:3d:56:64:ab:e4:a8:9a:27:
ae:96:b3:61:5f:79:2c:f1:68:39:06:04:ee:38:60:
f7:e0:b2:34:54:ea:d6:fc:98:d9:4e:7a:37:32:b2:
5e:c8:09:26:33:4d:9c:50:0a:94:e2:e3:9c:8e:fd:
a0:12:f6:96:02:fa:82:56:45:68:cf:6d:b1:6d:45:
81:21:0b:07:16:db:62:81:85:b8:b9:a7:a6:a7:b2:
58:12:6e:c2:26:9d:1f:85:3b:91:80:61:3b:61:26:
5d:38:33:13:10:24:ff:f3:44:8e:d1:01:d8:64:c9:
56:9f:7b:e4:1b:8c:f2:8b:8d:75:4b:26:b7:66:9c:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:13:1D:44:16:D5:C1:51:91:DF:D1:C4:16:59:DB:63:84:FC:6B:CC
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:78:fc:c5:c9:2b:47:22:2f:cc:c8:af:2a:eb:c1:60:ad:33:
84:46:53:a7:e2:e0:b0:c9:cf:c6:f4:c7:a6:b8:a8:3f:50:3d:
01:49:28:3c:c3:44:eb:11:c7:02:42:e3:e9:d1:79:2a:ce:fd:
13:eb:78:51:97:19:a8:80:ca:71:43:44:8f:e3:03:23:ad:42:
fd:6d:cd:60:b0:9b:76:22:98:11:73:a4:61:6a:23:2d:c8:10:
87:05:03:30:82:0e:c7:56:67:8b:03:94:12:bc:85:9f:2b:63:
e2:db:04:14:6e:de:95:9a:ae:28:4f:01:ec:87:c2:36:1e:38:
cb:01:9a:33:bf:14:b5:39:f3:47:9b:d4:67:d5:60:ff:79:d5:
1a:f8:89:84:c8:e0:8f:42:b7:d5:b6:35:f3:69:25:67:33:45:
79:b3:44:f5:ae:a4:11:ab:fc:57:4f:89:23:c9:da:cf:29:5b:
0e:ee:19:06:a6:d2:44:64:d2:ae:4b:93:d4:46:b0:c1:3f:79:
69:9e:ea:30:32:e8:10:81:b0:a8:84:7c:7a:82:a5:b6:cf:c4:
fd:ef:89:62:13:c5:24:43:1e:ec:81:73:e2:a0:62:51:99:4b:
92:04:05:a0:1e:0a:43:fb:0d:0a:ff:43:bd:54:e8:85:26:27:
9a:44:75:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOuOpNGfQFwe+xkkn1HjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx
MWEzMTgwHhcNMjUwMTMxMTEwMDI2WhcNMjUwMjAxMTEwMDI2WjAzMTEwLwYDVQQD
EyhmZTEzMWQ0NDE2ZDVjMTUxOTFkZmQxYzQxNjU5ZGI2Mzg0ZmM2YmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Pgf3UZzGIxfG4krldbyo3Myvs1I
hUfuNQz3EiZHpTTfQ0bKRsxSdKWtRm2fQSUiyk6YrIxLOaZQKNb4fFrKBlRY60GB
j/XlfZgIQL2A7JCObYmE+4yxkHCv6PTQFbemxgqh78SlqfhlaAj08DIgkRrb1wCE
+iUSvAJdhVxhPVZkq+SomieulrNhX3ks8Wg5BgTuOGD34LI0VOrW/JjZTno3MrJe
yAkmM02cUAqU4uOcjv2gEvaWAvqCVkVoz22xbUWBIQsHFttigYW4uaemp7JYEm7C
Jp0fhTuRgGE7YSZdODMTECT/80SO0QHYZMlWn3vkG4zyi411Sya3ZpzB9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4THUQW1cFRkd/RxBZZ22OE/GvMMB8GA1UdIwQY
MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt
YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4
LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHj8xckr
RyIvzMivKuvBYK0zhEZTp+LgsMnPxvTHprioP1A9AUkoPMNE6xHHAkLj6dF5Ks79
E+t4UZcZqIDKcUNEj+MDI61C/W3NYLCbdiKYEXOkYWojLcgQhwUDMIIOx1ZniwOU
EryFnytj4tsEFG7elZquKE8B7IfCNh44ywGaM78UtTnzR5vUZ9Vg/3nVGviJhMjg
j0K31bY182klZzNFebNE9a6kEav8V0+JI8nazylbDu4ZBqbSRGTSrkuT1EawwT95
aZ7qMDLoEIGwqIR8eoKlts/E/e+JYhPFJEMe7IFz4qBiUZlLkgQFoB4KQ/sNCv9D
vVTohSYnmkR14g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:49 2025 by rpki-client